<div class="gmail_quote">On Wed, Jul 15, 2009 at 6:53 PM, Petko Yotov <span dir="ltr"><<a href="mailto:5ko@5ko.fr" target="_blank">5ko@5ko.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hello. I have released pmwiki-2.2.3 stable today<br><br><snip><br>
<br>
A new variable $EnableUploadGroupAuth was added; if set to 1, it allows<br>
password-protected uploads to be checked against the Group password. This<br>
variable works with $EnableDirectDownload set to 0.<br></blockquote><div><br>How does this compare to, or alter, the previous method of password-protecting uploads? Running 2.1.x, I've been using the method of <br>1) setting $EnableDirectDownload to 0 in config.php, and <br>
2) having uploads/.htaccess with:<br>Order Deny,Allow<br>Deny from all<br>
<br>Now I've upgraded to 2.2.5, and looking over all the 2.2.x changes, I see we have <a href="http://www.pmwiki.org/wiki/PmWiki/UploadVariables#EnableUploadGroupAuth" target="_blank">http://www.pmwiki.org/wiki/PmWiki/UploadVariables#EnableUploadGroupAuth</a>, which says: "Set <code><code>$EnableUploadGroupAuth</code> = 1;</code> to authenticate downloads with the group password. This could be used together with <code><code>$EnableDirectDownload</code> = 0;</code>."<br>
<br>I'm confused -- if I'm already setting $EnableDirectDownload to 0, what does EnableUploadGroupAuth do?<br><br>Is the difference some change in the file uploads/.htaccess?<br><br>Instructions at <a href="http://www.pmwiki.org/wiki/Cookbook/SecureAttachments">http://www.pmwiki.org/wiki/Cookbook/SecureAttachments</a> don't reflect any change, other than to add a "See Also" link to <a href="http://www.pmwiki.org/wiki/PmWiki/UploadVariables#EnableUploadGroupAuth" target="_blank">http://www.pmwiki.org/wiki/PmWiki/UploadVariables#EnableUploadGroupAuth</a>.<br>
<br>Thanks!<br></div></div>